Is @scoped-vaadin/popover safe to use?

@scoped-vaadin/popover has no known vulnerabilities on the latest version (24.8.7). DepScope rates its health at 43/100 (high risk).

What is the latest version of @scoped-vaadin/popover?

The latest version of @scoped-vaadin/popover is 24.8.7, released 2025-09-05.

Does @scoped-vaadin/popover have known vulnerabilities?

No known vulnerabilities on the latest version of @scoped-vaadin/popover.

Is @scoped-vaadin/popover deprecated?

No, @scoped-vaadin/popover is actively maintained. Latest release: 24.8.7 (2025-09-05).

What are alternatives to @scoped-vaadin/popover?

Popular alternatives to @scoped-vaadin/popover in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @scoped-vaadin/popover use?

@scoped-vaadin/popover is licensed under Apache-2.0.

@scoped-vaadin/popover

npmv24.8.7

vaadin-popover

License Apache-2.0permissive4 versions1 maintainers10 deps8 weekly dl

robrez/scoped-vaadin

/ 100

Health

use with caution

@scoped-vaadin/[email protected] low health (43/100) — consider alternatives

Moderate health score (43/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

0/20

popularity

25/25

security

6/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (10)

@open-wc/dedupe-mixin @scoped-vaadin/a11y-base @scoped-vaadin/component-base @scoped-vaadin/lit-renderer @scoped-vaadin/overlay @scoped-vaadin/vaadin-lumo-styles @scoped-vaadin/vaadin-material-styles @scoped-vaadin/vaadin-themable-mixin lit @scoped-vaadin/internal-custom-elements-registry

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@scoped-vaadin/popover